Xray Mcp
@zhangning77-tech
About Xray Mcp
This is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities for ModelScope hosting.
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"xray-mcp": {
"command": "node",
"args": [
"path/xray-mcp-server/server.py"
],
"env": {
"XRAY_PATH": "path/bin/xray",
"XRAY_OUTPUT_DIR": "path/xray-mcp-server/xray-results",
"XRAY_CONFIG": "path/xray-mcp-server/config/xray-config.yaml"
}
}
}
}Tools
No tools detected
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Xray Mcp?
Xray Mcp is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities, designed for integration with the ModelScope hosting platform.
How to use Xray Mcp?
Install Python 3.7+ and the xray binary from chaitin/xray, then set the XRAY_PATH environment variable to point to the xray binary. Run python server.py to start the server, which reads JSON-RPC requests from stdin and writes responses to stdout. The server can also be integrated into ModelScope's MCP platform.
Key features of Xray Mcp
xray_scan: Perform vulnerability scans with configurable crawler type, timeout, plugins, and POC.xray_version: Retrieve the installed xray scanner version.xray_start_proxy(planned): Start xray in passive proxy mode with configurable port.xray_stop_proxy(planned): Stop the running xray proxy.xray_service_scan(planned): Scan non-HTTP services with port range and timeout.
Use cases of Xray Mcp
- Scan web applications for vulnerabilities using basic or phantasm crawlers.
- Automate vulnerability scanning in CI/CD pipelines via ModelScope MCP.
- Perform targeted scans with specific plugins or POCs.
- Set up passive proxy scanning for real-time detection (planned).
- Scan non-HTTP services for open ports and service detection (planned).
FAQ from Xray Mcp
What dependencies are required?
Python 3.7+ and the xray binary from chaitin/xray. The XRAY_PATH environment variable must point to the xray executable.
Where are scan results stored?
By default, results are stored in the system temporary directory. Custom output location can be set via the XRAY_OUTPUT_DIR environment variable.
What transport protocol does the server use?
The server communicates via JSON-RPC over stdin/stdout. It works with ModelScope's MCP platform which handles the transport layer.
Are authentication or access controls implemented?
The README does not specify built-in authentication. It recommends implementing appropriate access controls and rate limiting when deploying in production.
Are all listed features currently available?
No. xray_start_proxy, xray_stop_proxy, and xray_service_scan are marked as planned and are not yet implemented. The currently available tools are xray_scan and xray_version.
Frequently asked questions
What dependencies are required?
Python 3.7+ and the xray binary from chaitin/xray. The `XRAY_PATH` environment variable must point to the xray executable.
Where are scan results stored?
By default, results are stored in the system temporary directory. Custom output location can be set via the `XRAY_OUTPUT_DIR` environment variable.
What transport protocol does the server use?
The server communicates via JSON-RPC over stdin/stdout. It works with ModelScope's MCP platform which handles the transport layer.
Are authentication or access controls implemented?
The README does not specify built-in authentication. It recommends implementing appropriate access controls and rate limiting when deploying in production.
Are all listed features currently available?
No. `xray_start_proxy`, `xray_stop_proxy`, and `xray_service_scan` are marked as planned and are not yet implemented. The currently available tools are `xray_scan` and `xray_version`.
Basic information
More Other MCP servers
Lemon.io
lemon-ioRequest dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3
DeepMark
DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.
Figs, Relationship Expert
Figs O'Sullivan, LMFTCouples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep
Reactive Resume
amruthpillaiA one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Inbox Zero AI MCP
elie222The world's best AI personal assistant for email. Open source app to help you reach inbox zero fast.
Comments